So if I want MedicalRecordsController#index to ONLY return medical records for the current user, what's the right technique? What I've done -- and it appears to work -- is to exploit the fact that load_resource sets @medical_records to a relation, and do further filtering on that: